Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
File: DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer (raw, json)
Hash identifier: XvLn5Kpj2dZYQqMigJMuthXUsT6XX9D4rpuhp7u+2ac=
Subject key identifier: 0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C920E2D00206AA094B33A8CEEF4B5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 13128
IP: 141.15.0.0/16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:92:0e:2d:00:20:6a:a0:94:b3:3a:8c:ee:f4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b2:1f:e5:2c:80:b8:13:df:5b:d6:8b:3c:76:
81:92:e0:36:bc:4e:6a:b1:14:82:31:cb:fc:5f:8b:
e2:f9:14:1d:3a:02:a1:3f:32:9d:f1:f3:36:e6:24:
8c:77:26:a7:a7:58:ff:6e:e3:9a:6f:88:c4:aa:0f:
4d:ef:ec:0d:ac:08:4d:88:81:df:e0:f5:79:99:60:
95:6d:2e:fb:98:da:89:51:ed:86:b4:1f:6f:6a:82:
31:12:07:85:be:04:37:19:be:08:35:e2:05:e5:2e:
d8:99:0f:60:30:0a:cd:0b:46:9c:c7:79:41:2c:ef:
4d:06:18:30:3f:c7:93:a0:de:46:b9:0c:79:36:1a:
60:85:7f:b7:e7:5f:ef:87:a3:eb:5c:be:54:88:c0:
47:22:fd:25:1a:a9:20:b6:45:84:05:48:5e:9d:73:
ed:34:63:dc:55:c5:7e:64:14:09:a1:cc:12:83:1f:
8d:c7:6f:52:fe:af:ea:52:11:12:a3:2e:e9:39:8e:
a4:a1:94:e6:bb:cd:33:1e:46:dd:d1:f8:e0:64:4a:
ac:c8:41:88:c9:5f:b3:79:28:09:ae:98:f7:db:92:
85:93:8c:35:a1:43:cf:01:53:db:f8:fc:07:f7:78:
65:3c:a1:11:14:0e:04:90:20:a5:10:9d:9c:2a:ae:
cb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.15.0.0/16
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13128
Signature Algorithm: sha256WithRSAEncryption
4b:3c:d8:2b:a7:ba:8d:a6:68:e7:20:0a:a8:8b:13:ea:e1:93:
57:80:7d:81:55:96:ba:5a:2b:96:ce:0a:d7:30:a6:6b:1e:b1:
8d:ad:03:e9:ce:1b:08:b3:ca:5e:77:75:ae:97:57:bd:d9:9d:
a2:f0:2d:67:4f:e0:82:08:5d:0c:3e:4a:9f:56:a5:99:62:1d:
2a:7d:18:02:87:f7:53:cc:d4:7f:ff:36:b5:0c:01:5a:87:03:
69:88:94:6c:91:39:2b:d5:28:cd:1e:50:30:59:ca:81:08:59:
97:98:49:1c:6f:6d:5a:92:56:de:29:ce:48:0d:f7:a7:52:d1:
0e:c4:f5:e2:5e:18:57:90:56:8b:b5:63:9b:42:de:31:1c:02:
ca:62:e3:6d:65:d5:ca:e6:0e:69:1c:66:96:c4:d7:45:0c:73:
86:8d:a7:27:c6:f1:59:3b:e4:9e:fe:5d:8e:4d:47:ac:32:66:
2a:59:7c:11:4f:bd:0e:18:0f:42:00:3e:70:2d:b2:4e:1e:46:
e4:7b:d8:9e:59:df:66:e3:bb:66:49:e2:ad:53:26:25:c6:78:
24:e2:73:4d:32:00:87:db:53:57:1e:f3:d2:e2:7b:e1:b3:d5:
b3:c3:0f:63:f5:03:57:a2:3e:a5:e6:1b:d7:16:ab:24:2a:fb:
94:47:9a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:29 2025 by rpki-client